Privacy Policy

1Information We Collect

What data we gather and why

A. Information You Provide

• Account Information: Name, email address, and authentication data when you sign up via Google Sign-In.
• Organization Information: Company name, tenant setup details, and team member information when configuring your workspace.
• CRM Data: Contacts, deals, appointments, call logs, emails, notes, tasks, and other sales-related data you enter into the platform.
• Communication Data: Messages, call recordings, email correspondence, and support tickets.

B. Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interaction patterns within the Service.
• Device Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Call Data: Metadata from telephony sessions including timestamps, duration, and participant identifiers.
• Log Data: Server logs, error reports, and performance metrics.

2How We Use Your Information

Purposes and legitimate interests

• To provide, operate, and maintain the Service.
• To authenticate your identity and manage your account.
• To process and manage CRM data, calls, emails, and workflows within your tenant.
• To communicate with you about service updates, security alerts, and support.
• To analyze usage patterns and improve the platform’s performance and features.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations and enforce our Terms of Use.

3Legal Basis for Processing (GDPR)

How EU law applies to your data

For users in the European Economic Area (EEA), our legal bases for processing include: (a) Contractual necessity — processing required to deliver the Service; (b) Legitimate interests — improving security, preventing fraud, and enhancing the platform; (c) Consent — where you have given explicit permission (e.g., marketing communications); and (d) Legal obligation — compliance with applicable laws.

4Data Sharing & Third Parties

When and with whom we share information

We do not sell your personal data. We share data only in the following circumstances:

• Service Providers: Infrastructure (MongoDB Atlas, Redis), authentication (Firebase Auth), email delivery, and telephony (Jambonz) providers who process data on our behalf under strict data processing agreements.
• Within Your Tenant: Data is shared among authorized members of your organization as configured by your tenant administrator.
• Legal Compliance: If required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or asset sale, with appropriate notice.

5Data Retention

How long we keep your data

We retain your data for as long as your account is active or as needed to provide the Service. CRM data, call recordings, and communications are retained per your tenant’s configuration. Upon account termination, data is deleted within 30 days unless a longer retention period is required by law. Backup copies may persist for up to 90 days before permanent deletion. See our Data Deletion Policy for details.

6Data Security

How we protect your information

We implement industry-standard security measures:

• Encryption at rest (AES-256) and in transit (TLS 1.3).
• Multi-tenant data isolation at the database and application layer.
• Role-based access control (RBAC) with fine-grained permissions.
• Regular security audits, penetration testing, and vulnerability scanning.
• SOC 2 Type II readiness and GDPR compliance framework.
• Automated monitoring, alerting, and incident response procedures.

No method of transmission or storage is 100% secure, but we strive to protect your data with commercially reasonable measures.

7Your Rights (GDPR / CCPA)

Your legal data rights under EU and California law

To exercise any of these rights, contact us at privacy@prosalesteam.com. We’ll respond within 30 days.

8Cookies & Tracking

How we use cookies and tracking technologies

We use essential cookies for authentication, session management, and security. We may use analytics cookies to understand platform usage and improve the Service. You can manage cookie preferences through your browser settings. See our Cookie Policy for complete details on all cookies we use.

9Children's Privacy

Our stance on underage data collection

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

10International Data Transfers

Where your data is stored and processed

Your data is processed and stored in the European Union (Frankfurt, Germany region). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

11Changes to This Policy

How we update and notify you

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before they take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

12Contact Us

Get in touch about your data